CVE-2020-35865

Name of the Vulnerable Software and Affected Versions os str bytes crate versions prior to 2.0.0

Description The issue arises from false expectations about the behavior of char::from u32 unchecked. Specifically, the Windows implementation of the os str bytes crate relied on the behavior of std::char::from u32 unchecked when its safety clause is violated. Although this behavior worked with Rust versions up to 1.42, it could change with any new Rust version, potentially leading to a security issue.

Recommendations For os str bytes crate versions prior to 2.0.0, update to version 2.0.0 to resolve the issue.